PSA: Apple hasn’t fixed the Gatekeeper vulnerability, only blocked specific apps using it

gatekeeper

The security researcher who identified a serious flaw in Apple’s Gatekeeper reports that the vulnerability remains despite two security patches applied by the company. Each, he says, only blocks the specific apps he used to demonstrate the method.

Gatekeeper in theory allows users to ensure that their Mac will only run apps downloaded from the Mac App Store – or alternatively, signed by a known developer if you opt for a lower level of protection. But Patrick Wardle last September found a major vulnerability in this protection which would allow any malicious app to be run no matter what Gatekeeper setting was chosen.

Wardle informed Apple, which issued a security patch in response, but Wardle has now reverse-engineered the patch and found that it provides only extremely limited protection …

Engadget reports that Apple simply blocked the specific apps Wardle had used as proof of concept. He was able to work around this by using a new set of apps, and Apple again responded only by blocking those specific apps.

The only way to protect against the vulnerability for now is to ensure that a Mac has only ever downloaded apps from the Mac App Store or from trusted developers that provide downloads over an https link.

Filed under: Mac Tagged: Apple Inc, el capitan, Gatekeeper, Gatekeeper flaw, Gatekeeper vulnerability, Mac App Store, OS X

For more news on Mac, Apple Inc, and OS X continue reading at 9to5Mac.

What do you think? Discuss “PSA: Apple hasn’t fixed the Gatekeeper vulnerability, only blocked specific apps using it” with our community.

Apple could owe more than $8B in back taxes if European Commission ruling goes against it – Bloomberg

apple-tax-ec

With a recent European Commission ruling making it look more likely than ever that Apple’s tax arrangements in Ireland will be declared illegal, Bloomberg has been doing the sums on how much the company may owe in back tax. The total? More than $8 billion.

Apple funnels all its European revenue through Ireland, where a special agreement with the Irish government means that it pays just 2.5% tax instead of the normal 12.5%. A long-running European Commission investigation into the legality of this arrangement was recently extended and expanded its scope.

Assuming the agreement is ruled to be illegal, it would be the Irish government – and not Apple – who broke the law, but Apple would still have to pay the difference between the tax it actually paid and the full amount that would have been due without the deal. The company warned shareholders last year that it may have to pay ‘material’ back taxes, but the figure calculated by Bloomberg is much larger than earlier estimates …

The total liability could even be greater than $8B. In addition to the extra tax payable in Ireland, Apple may also face back-tax bills from each individual EC country where sales were recorded – at rates typically far higher than applicable in Ireland even without the deal.

This has already happened in Italy, where Apple recently agreed to pay €318M ($347M) claimed by the Italian tax office for just two years. If each European country with Apple Stores billed Apple for taxes due for all sales made in the country for the full period, it’s not hard to see how the total bill could be rather impressive.

Filed under: AAPL Company Tagged: AAPL, Apple Inc, European Commission, European Union, Government of Ireland, Ireland, Irish tax arrangements, Italy, Tax

Check out 9to5Mac for more breaking coverage of AAPL Company, Apple Inc, and AAPL.

What do you think? Discuss “Apple could owe more than $8B in back taxes if European Commission ruling goes against it – Bloomberg” with our community.

Bad news if you watch Netflix content from other countries: proxies will soon be blocked

netflix-proxy-block

There’s bad news for anyone who uses a proxy service to access Netflix content from outside their own country: the company says in a blog post that it will be blocking proxies within the “coming weeks” …

Outdated licensing agreements with content owners – still based on the old days of selling content to local TV networks – mean that Netflix offers access to different TV shows in different countries. Many Netflix users use a proxy app like VPN Unlimited to spoof the location of their device, especially to gain access to the huge U.S. catalog from elsewhere.

Netflix has so far made only the most cursory of attempts to block these, meaning that both iOS apps and browser plugins have generally worked. With the recent rollout to more than 130 new countries, however, it’s likely that content owners have required the company to take real steps to tackle the issue.

The move will be something of a gamble on the company’s part. Many Netflix subscribers outside the US pay for membership specifically to get earlier access to shows first launched in the US, and may now cancel their subscriptions – but Netflix will be hoping that this is more than offset by revenue from the new countries.

Netflix was one of the services featured in a recent Apple TV promotion while Apple continues to work on developing its own streaming content package.

Photo: The Verge

Filed under: Apps Tagged: Apple TV, Netflix, Netflix proxy, Proxy, VPN Unlimited

Continue reading more about Apps, Apple TV, and Netflix at 9to5Mac.

What do you think? Discuss “Bad news if you watch Netflix content from other countries: proxies will soon be blocked” with our community.

Flux responds to iOS 9.3’s Night Shift feature, asks for its app to be allowed in App Store

screen-shot-2016-01-12-at-8-34-00-pm-2

Apple earlier this week introduced the first beta of iOS 9.3 and included in it is a new feature called Night Shift. Night Shift uses your iOS device’s location and clock to automatically adjust the colors in your display, making them warmer and easier on the eyes at nighttime, which ideally would allow you to sleep better. When Apple announced this feature, people immediately noticed the similarity to the popular third-party app Flux, which was only briefly available for iOS last year before Apple shut it down. Now, the developers behind Flux have come out and offered a comment on Apple’s new Night Shift feature…

In a blog post, the Flux team acknowledged that it’s a big step for Apple to acknowledge the health risks that go along with looking at a bright display late at night. Flux, however, wasn’t going to let its own contribution go unnoticed and reaffirmed the fact that it is the “original innovators and leaders” in the market.

Flux didn’t stop there, though. The developers said that they are now calling on Apple to allow them to release Flux on iOS and to open up access to the API used to power Night Shift. As I mentioned before, Flux was briefly made available for iOS via side loading with Xcode last year, but not through the App Store as to not break Apple’s policies. The app, however, was removed from the developer’s website at the request of Apple a day later.

Whether or not Apple responds to Flux’s argument remains to be seen. Even if Apple were to allow Flux to be available in the App Store, it would be hard to convince the average user to download it as opposed to just using built-in Night Shift feature, even if Flux offers considerably more customization. Nevertheless, Flux remains available for Mac.

Filed under: Apps Tagged: flux, iOS, iOS 9.3, Night Shift

Check out 9to5Mac for more breaking coverage of Apps, iOS, and iOS 9.3.

What do you think? Discuss “Flux responds to iOS 9.3’s Night Shift feature, asks for its app to be allowed in App Store” with our community.

‘Nerds’ musical about Steve Jobs (& Bill Gates) heads to Broadway w/ onstage holograms, in-show app experience

Jobs-Gates

A new musical called “Nerds” about Steve Jobs and Bill Gates is set to hit Broadway and at the same time be the first show of its kind to feature an in-show app experience, onstage holograms, and other new technologies.

An announcement on Broadway.com describes the show as “the story of the rise of computer technology and the two men that made it all possible—Bill Gates and Steve Jobs.” And Hollywood Reporter notes that the show will feature a number of new technologies that include onstage holograms, projection mapping, and in-show app integrations that will allow the audience to select how the show ends. 

The production follows the founding fathers of personal computing as they transform from nerds to billionaires.

A cast hasn’t yet been announced, but the show’s book and lyrics are penned by Jordan Allen-Dutton and Erik Weiner (of Robot Chicken fame), while music is by by Hal Goldberg.

Tickets for the show are already on sale ahead of an opening at the Longacre Theatre on April 21. The announcement comes at the same time that the recent Steve Jobs movie cast gets several Oscar nominations for the upcoming 88th Academy Awards.

Filed under: AAPL Company, Apps Tagged: april 21, Bill Gates, Broadway, holograms, musical, nerds, Robot Chicken, Steve Jobs, Tickets

For more information about AAPL Company, Apps, and Steve Jobs continue reading at 9to5Mac.

What do you think? Discuss “‘Nerds’ musical about Steve Jobs (& Bill Gates) heads to Broadway w/ onstage holograms, in-show app experience” with our community.

Hands-on: Square Contactless is an Apple Pay payment terminal for any business

Square Apple Pay Reader

Late last year Square released its updated Square Reader for accepting contactless and chip payment methods on iPhones and iPads, which means small businesses and pop up shops can take Apple Pay payments from iPhones and Apple Watches without expensive terminal systems. The new Square Reader goes for $49 with transaction fees set at 2.75% so you keep $97.25 out of every $100 sent through Square. Square’s app lets you create mobilized businesses on iPhones and iPads, and we’ve tested the new Apple Pay-ready reader to see just how easy it all is.

The updated kit includes two pieces of hardware. Square Contactless is a rechargeable Bluetooth reader that takes contactless payments and cards with secure chips. The other is the classic Square Reader that connects to headphone jacks and lets you swipe traditional debit and credit cards. If the iPhone 7 starts the death of the headphone jack, Square Contactless will be all the more important for small shops.

Inside the box you’ll also find a short microUSB cable for recharging the Square Contactless. Mine came fully charged according to the four green LED lights found on the new hardware. A battery indicator button next to the microUSB port along the back lets you check battery life anytime.

DSC_2522

You’ll also find a Square payments decal to present to your customers. This lists the six different payment methods Square allows businesses to accept: Apple Pay, Google Pay, Visa, MasterCard, American Express, and Discover. I’ve seen at least one small coffee shop around where I live present this decal. I think the Apple Pay logo will be pretty good marketing, and it’s great to see Google Pay right there too.

DSC_2523

Setting up the new Square Contactless reader takes just a few minutes. Sign up for or sign in with your Square account, the hit the settings section of the app to look for new hardware for pairing. Square Contactless connects wirelessly via Bluetooth so ensure that’s on first then let the app locate the hardware. iOS will ask for permission to pair with the hardware, then you’re ready to go. The longest step in the process was updating the firmware on the hardware from the app, but the whole setup was ready to go in under 10 minutes.

IMG_0685
IMG_0686

Once you’re ready to charge a customer for any transaction and you’ve entered the total amount in the Square Register app, the Square Contactless fires up its NFC radios and looks for nearby contactless payment devices like iPhones and Apple Watches. A single green LED lights up to let you know the hardware is ready to go, and it stays ready for about a minute until it lights up four red LED lights to let you know nothing was detected. Back in the Square app, you can optionally tap a dialog button that appears to turn on the Apple Pay reader for another 60 seconds or so.

DSC_2525
DSC_2524

Similarly, you can insert a chip-enabled debit or credit card in the Square Contactless reader as well. I’ve used chip terminals at places like Target that don’t accept Apple Pay yet and the experience is always very archaic. Insert the chip end of the card, hear a loud tone, wait what feels like forever, enter your pin, hear another loud tone, then pull your card out but not toon soon! The Square Contactless reader handled my chip-enabled debit card much more gracefully. No tones or long waits and the Square app nearly instantly presented a signature screen. You can even sign with the Apple Pencil on the iPad Pro, although it’s not yet optimized and noticeably doesn’t feature palm rejection.

Check out our hands-on video below:

As someone who knows nothing about setting up payment terminals and even less about what’s required to accept chip and contactless payment methods, I found Square Contactless to be super easy to use after just a few minutes of setting up. Apple Pay is a joy to use whether it’s from the iPhone or Apple Watch, and Square’s $49 solution makes it possible for small businesses and pop up vendors to easily impress customers and take the latest payment methods. During the early days of Apple Pay, I might even see a business or vendor using Square Contactless and decide to buy something just for the chance to pay with my iPhone or Apple Watch. You can still find Square’s classic Reader as well, which is included in the new kit. The updated kit is shipping to new reservers in March at the time of writing.

Filed under: iOS Devices Tagged: Apple pay, mobile payments, Square

For more news on iOS Devices, Apple pay, and mobile payments continue reading at 9to5Mac.

What do you think? Discuss “Hands-on: Square Contactless is an Apple Pay payment terminal for any business” with our community.

OS X 10.11.4 public beta with Live Photos in Messages, secure Notes, and more is now available

Live Photos Mac

Public beta testers can now try the new OS X 10.11.4 prerelease that first hit developers earlier this week. New features include Live Photo viewing and sharing in Messages, secure password protection for individual notes in Apple’s Notes app, and other improvements. Check out our full coverage of OS X 10.11.4 and other betas released earlier this week below:

iOS 9.3 for public beta testers and iOS 9.3 beta 1.1 for developers are also available from today.

Filed under: iOS Devices

For more information about iOS Devices continue reading at 9to5Mac.

What do you think? Discuss “OS X 10.11.4 public beta with Live Photos in Messages, secure Notes, and more is now available” with our community.

iOS 9.3 public beta + 9.3 dev beta 1.1 w/ Night Shift, Touch ID Notes, more now available

iOS 9.3 3D Touch

The public beta version of iOS 9.3 for non-developer testers is now available. The first iOS 9.3 beta was first released earlier this week to registered developers and includes a number of new mid-cycle features and enhancements. These include secure passwords and Touch ID protection for Notes, a new Night Shift feature to adjust display temperate in the evening, and expanded 3D Touch quick actions on the latest iPhones. iOS 9.3 Beta 1.1 is also available for registered developers.

Check out our full coverage of iOS 9.3 and other betas released earlier this week below:

IMG_4641

OS X 10.11.4 is also available today for public beta testers.

 

Filed under: iOS, iOS Devices

For more news on iOS Devices and iOS continue reading at 9to5Mac.

What do you think? Discuss “iOS 9.3 public beta + 9.3 dev beta 1.1 w/ Night Shift, Touch ID Notes, more now available” with our community.

9to5Toys Lunch Break: Guitar Hero for iOS $50, Philips Hue Bloom $100, Harman refurb Bluetooth Speaker $70, more

9to5toys-header

Keep up with the best gear and deals on the web by signing up for the 9to5Toys Newsletter. Also, be sure to check us out on: TwitterRSS FeedFacebookGoogle+ and Safari push notifications.

TODAY’S CAN’T MISS DEALS:

guitar-hero-live-ios (1)

Games/Apps: Guitar Hero Live (all platforms) $50 (Orig. $100), XCOM Enemy Unknown Elite for Mac $10, iOS freebies, more

philips-hue-bloom-kit (1)

Philips Friends of Hue Bloom Luminaire Starter Kit: $100 shipped (Orig. $180)

harman-kardon-esquire-copy

Bluetooth Audio Deals: Harman Kardon Speaker (refurb) $70, Over-Ear Headphones $17, more

a-dark-room-icon

A Dark Room for iOS goes free as IGN’s Game of the Month (Reg. $1)

Lifeline text-adventure game goes free for the first time (Reg. $3)

MORE NEW GEAR FROM TODAY:

aerb-milanese-loop-watch-band

Add Milanese Loop style to your Apple Watch for a fraction of the price: $17 Prime shipped (Reg. $25)

MORE DEALS STILL ALIVE:

cambond-mfi-cable

MFi Apple-Certified Lightning Cables: 10-ft. Braided $10.50 (Reg. $17), Dual-Port Car Charger + 3-ft. $12, more

motorola-sb6121-6141-cable-modems

It’s 2016, stop renting your cable modem: Motorola refurb DOCSIS 3.0 deals from $40 (Orig. up to $220)

NEW PRODUCTS & MORE:

kiba-family-camera

The Kiba camera wants to sit on your shelf and record life’s biggest moments

Filed under: Tips and Tricks Tagged: 9to5Toys, Amazon, app deals, Best Buy, Daily Deals, free apps, Gold Box, Guitar Hero, Philips hue, video games

Check out 9to5Mac for more breaking coverage of Tips and Tricks, 9to5Toys, and Daily Deals.

What do you think? Discuss “9to5Toys Lunch Break: Guitar Hero for iOS $50, Philips Hue Bloom $100, Harman refurb Bluetooth Speaker $70, more” with our community.

Steve Jobs movie cast among Oscar nominees for upcoming 88th Academy Awards

Steve Jobs movie 16-9

Aaron Sorkin’s mixed reviewed Steve Jobs movie already won a Golden Globe Award for Best Screenplay and was nominated for even more, and now the film is showing up on the 2016 Oscar nominees list. The Steve Jobs biopic could win two Oscars as the upcoming 88th Academy Awards.

Michael Fassbender, who portrayed the title character in the movie is nominated for Best Actor for his role in the film. Fassbender is competing with Bryan Cranston (Trumbo), Matt Damon (The Martian), Leonardo DiCaprio (The Revenant), and Eddie Redmayne (The Danish Girl). Interestingly, DiCaprio was once on board to play the role of the late Apple co-founder before dropping out.

In the Best Supporting Actress category, Kate Winslet is being nominated for her part in the Jobs film. Winslet, who played Joanna Hoffman, already won a Golden Globe Award for Best Performance by an Actress in a Supporting Role for the movie. The actress is up against Jennifer Jason Leigh (The Hateful Eight), Rooney Mara (Carol), Rachel McAdams (Spotlight), and Alicia Vikander (The Danish Girl).

The 88th Academy Awards where the Oscars are recognized takes place on February 28, 2016. We’ll stay tuned to see if the Steve Jobs movie racks up any new awards next month.

Filed under: AAPL Company Tagged: Aaron Sorkin, academy awards, Kate Winslet, Michael Fassbender, Oscars, Steve Jobs, Steve Jobs movie

For more news on AAPL Company, Steve Jobs, and Aaron Sorkin continue reading at 9to5Mac.

What do you think? Discuss “Steve Jobs movie cast among Oscar nominees for upcoming 88th Academy Awards” with our community.